1# 2# Mach Operating System 3# Copyright (c) 1986 Carnegie-Mellon University 4# Copyright 2001-2018 Apple Inc. 5# 6# All rights reserved. The CMU software License Agreement 7# specifies the terms and conditions for use and redistribution. 8# 9####################################################################### 10# 11# Master machine independent configuration file. 12# 13# Specific configuration files are created based on this and 14# the machine specific master file using the doconf script. 15# 16# Any changes to the master configuration files will affect all 17# other configuration files based upon it. 18# 19####################################################################### 20# 21# To build a configuration, execute "doconf <configuration>." 22# Configurations are specified in the "Configurations:" section 23# of the MASTER and MASTER.* files as follows: 24# 25# <configuration> = [ <attribute0> <attribute1> ... <attributeN> ] 26# 27# Lines in the MASTER and MASTER.* files are selected based on 28# the attribute selector list, found in a comment at the end of 29# the line. This is a list of attributes separated by commas. 30# The "!" operator selects the line if none of the attributes are 31# specified. 32# 33# For example: 34# 35# <foo,bar> selects a line if "foo" or "bar" are specified. 36# <!foo,bar> selects a line if neither "foo" nor "bar" is 37# specified. 38# 39# Lines with no attributes specified are selected for all 40# configurations. 41# 42####################################################################### 43# 44# SYSTEM SIZE CONFIGURATION (select exactly one) 45# 46# xlarge = extra large scale system configuration 47# large = large scale system configuration 48# medium = medium scale system configuration 49# small = small scale system configuration 50# xsmall = extra small scale system configuration 51# bsmall = special extra small scale system configuration 52# 53####################################################################### 54# 55 56options INET # # <inet> 57 58options MACH # Standard Mach features # <mach> 59options MACH_FLIPC # Fast-Local IPC # <mach_flipc> 60options LOOP # loopback support # <loop> 61options VLAN # # <vlan> 62options BOND # # <bond> 63options IF_FAKE # # <if_fake> 64options IF_HEADLESS # # <if_headless> 65options AH_ALL_CRYPTO # AH all crypto algs # <ah_all_crypto> 66options PF # Packet Filter # <pf> 67options PF_ECN # PF use ECN marking # <pf_ecn> 68options PFLOG # PF log interface # <pflog> 69options MEASURE_BW # interface bandwidth measurement # <measure_bw> 70options DUMMYNET # dummynet support # <dummynet> 71options TRAFFIC_MGT # traffic management support # <traffic_mgt> 72options MULTICAST # Internet Protocol Class-D $ 73options TCPDEBUG # TCP debug # <tcpdebug> 74options IFNET_INPUT_SANITY_CHK # allow dlil/ifnet input sanity check # <ifnet_input_chk> 75options MULTIPATH # Multipath domain # <multipath> 76options MPTCP # Multipath TCP # <mptcp> 77options SYSV_SEM # SVID semaphores # <sysv_sem> 78options SYSV_MSG # SVID messages # <sysv_msg> 79options SYSV_SHM # SVID shared mem # <sysv_shm> 80options PSYNCH # pthread synch # <psynch> 81options FLOW_DIVERT # <flow_divert> 82options NECP # <necp> 83options CONTENT_FILTER # # <content_filter> 84options PACKET_MANGLER # # <packet_mangler> 85options REMOTE_VIF # # <remote_vif> 86options SKYWALK # # <skywalk> 87options CONFIG_NEXUS_USER_PIPE # # <config_nexus_user_pipe> 88options CONFIG_NEXUS_KERNEL_PIPE # # <config_nexus_kernel_pipe> 89options CONFIG_NEXUS_MONITOR # # <config_nexus_monitor> 90options CONFIG_NEXUS_FLOWSWITCH # # <config_nexus_flowswitch> 91options CONFIG_NEXUS_NETIF # # <config_nexus_netif> 92 93# secure_kernel - secure kernel from user programs 94options SECURE_KERNEL # <secure_kernel> 95 96# 97# 4.4 general kernel 98# 99options SOCKETS # socket support # <inet> 100options DIAGNOSTIC # diagnostics # <diagnostic> 101options PROFILE # kernel profiling # <profile> 102options SENDFILE # sendfile # <sendfile> 103options NETWORKING # networking layer # <inet> 104options CONFIG_FSE # file system events # <config_fse> 105options CONFIG_IMAGEBOOT # local image boot # <config_imageboot> 106options CONFIG_MBUF_JUMBO # jumbo cluster pool # <config_mbuf_jumbo> 107options CONFIG_IMAGEBOOT_IMG4 # authenticate image with AppleImage4 # <config_imageboot_img4> 108options CONFIG_IMAGEBOOT_CHUNKLIST # authenticate image with a chunk list # <config_imageboot_chunklist> 109 110options CONFIG_WORKLOOP_DEBUG # <config_workloop_debug> 111 112# 113# 4.4 filesystems 114# 115options MOCKFS # Boot from an executable # <mockfs> 116options FIFO # fifo support # <fifo> 117options FDESC # fdesc_fs support # <fdesc> 118options DEVFS # devfs support # <devfs> 119options ROUTEFS # routefs support # <routefs> 120options NULLFS # nullfs support # <nullfs> 121options BINDFS # bindfs support # <bindfs> 122options FS_COMPRESSION # fs compression # <fs_compression> 123options CONFIG_DEV_KMEM # /dev/kmem device for reading KVA # <config_dev_kmem> 124 125# 126# file system features 127# 128options QUOTA # file system quotas # <quota> 129options NAMEDSTREAMS # named stream vnop support # <namedstreams> 130options CONFIG_APPLEDOUBLE # apple double support # <config_appledouble> 131options CONFIG_VOLFS # volfs path support (legacy) # <config_volfs> 132options CONFIG_IMGSRC_ACCESS # source of imageboot dmg # <config_imgsrc_access> 133options CONFIG_TRIGGERS # trigger vnodes # <config_triggers> 134options CONFIG_EXT_RESOLVER # e.g. memberd # <config_ext_resolver> 135options CONFIG_SEARCHFS # searchfs syscall support # <config_searchfs> 136options CONFIG_MNT_SUID # allow suid binaries # <config_mnt_suid> 137options CONFIG_MNT_ROOTSNAP # allow rooting from snapshot # <config_mnt_rootsnap> 138options CONFIG_ROSV_STARTUP # allow read-only system volume startup # <config_rosv_startup> 139options CONFIG_FIRMLINKS # support "firmlinks" # <config_firmlinks> 140options CONFIG_MOUNT_VM # mount VM volume on startup # <config_mount_vm> 141options CONFIG_MOUNT_PREBOOTRECOVERY # mount Preboot and/or Recovery volume on startup # <config_mount_prebootrecovery> 142options CONFIG_DATALESS_FILES # support dataless file materialization # <config_dataless_files> 143options CONFIG_BASESYSTEMROOT # mount BaseSystem as initial root filesystem on some kinds of startup # <config_basesystemroot> 144options CONFIG_UNION_MOUNTS # support union mounts # <config_union_mounts> 145options CONFIG_FILE_LEASES # local file leasing support # <config_file_leases> 146 147# 148# VFS debugging 149# 150options CONFIG_IOCOUNT_TRACE # enable vnode's iocount tracing # <config_iocount_trace> 151 152# NFS support 153# 154options NFSSERVER # Be an NFS server # <nfsserver> 155options CONFIG_NETBOOT # network booting # <config_netboot> 156 157# 158# Machine Independent Apple Features 159# 160profile # build a profiling kernel # <profile> 161 162# 163# IPv6 Support 164# 165options IPSEC # IP security # <ipsec> 166options IPSEC_ESP # IP security # <ipsec> 167 168pseudo-device gif 1 # <gif> 169pseudo-device dummy 2 # <dummy> 170pseudo-device stf 1 # <stf> 171 172options CRYPTO # <ipsec,crypto> 173options CRYPTO_SHA2 # <crypto_sha2> 174options ENCRYPTED_SWAP # <encrypted_swap> 175 176options CONFIG_IMG4 # <config_img4> 177 178options ZLIB # inflate/deflate support # <zlib> 179options ZLIBC # inflate/deflate support # <zlibc> 180 181options IF_BRIDGE # <if_bridge> 182 183# 184# configurable kernel event related resources 185# 186options CONFIG_KN_HASHSIZE=64 # <medium,large,xlarge> 187options CONFIG_KN_HASHSIZE=48 # <small,xsmall> 188options CONFIG_KN_HASHSIZE=20 # <bsmall> 189 190# 191# configurable vfs related resources 192# CONFIG_VNODES - used to pre allocate vnode related resources 193# CONFIG_NC_HASH - name cache hash table allocation 194# CONFIG_VFS_NAMES - name strings 195# 196# 263168 magic number for medium CONFIG_VNODES is based on memory 197# Number vnodes is (memsize/64k) + 1024 198# This is the calculation that is used by launchd in tiger 199# we are clipping the max based on 16G 200# ie ((16*1024*1024*1024)/(64 *1024)) + 1024 = 263168; 201 202options CONFIG_VNODES=263168 # <large,xlarge> 203options CONFIG_VNODES=263168 # <medium> 204options CONFIG_VNODES=10240 # <small> 205options CONFIG_VNODES=750 # <bsmall> 206 207options CONFIG_NC_HASH=5120 # <large,xlarge> 208options CONFIG_NC_HASH=4096 # <medium> 209options CONFIG_NC_HASH=2048 # <small,xsmall> 210options CONFIG_NC_HASH=1024 # <bsmall> 211 212options CONFIG_VFS_NAMES=5120 # <large,xlarge> 213options CONFIG_VFS_NAMES=4096 # <medium> 214options CONFIG_VFS_NAMES=3072 # <small,xsmall> 215options CONFIG_VFS_NAMES=2048 # <bsmall> 216 217options CONFIG_MAX_CLUSTERS=8 # <xlarge,large,medium> 218options CONFIG_MAX_CLUSTERS=4 # <small,xsmall,bsmall> 219 220# 221# configurable options for minumum number of buffers for kernel memory 222# 223options CONFIG_MIN_NBUF=256 # <medium,large,xlarge> 224options CONFIG_MIN_NBUF=128 # <small> 225options CONFIG_MIN_NBUF=80 # <xsmall> 226options CONFIG_MIN_NBUF=64 # <bsmall> 227 228options CONFIG_MIN_NIOBUF=128 # <medium,large,xlarge> 229options CONFIG_MIN_NIOBUF=64 # <xsmall,small> 230options CONFIG_MIN_NIOBUF=32 # <bsmall> 231 232# 233# set maximum space used for packet buffers 234# 235options CONFIG_NMBCLUSTERS="((1024 * 1024) / MCLBYTES)" # <large,xlarge> 236options CONFIG_NMBCLUSTERS="((1024 * 512) / MCLBYTES)" # <medium> 237options CONFIG_NMBCLUSTERS="((1024 * 256) / MCLBYTES)" # <bsmall,xsmall,small> 238 239# 240# Configure size of TCP hash table 241# 242options CONFIG_TCBHASHSIZE=4096 # <medium,large,xlarge> 243options CONFIG_TCBHASHSIZE=128 # <xsmall,small,bsmall> 244 245# 246# configurable async IO options 247# CONFIG_AIO_MAX - system wide limit of async IO requests. 248# CONFIG_AIO_PROCESS_MAX - process limit of async IO requests. 249# CONFIG_AIO_THREAD_COUNT - number of async IO worker threads created. 250# 251options CONFIG_AIO_MAX=360 # <xlarge> 252options CONFIG_AIO_MAX=180 # <large> 253options CONFIG_AIO_MAX=90 # <medium> 254options CONFIG_AIO_MAX=45 # <small> 255options CONFIG_AIO_MAX=20 # <xsmall> 256options CONFIG_AIO_MAX=10 # <bsmall> 257 258options CONFIG_AIO_PROCESS_MAX=64 # <xlarge> 259options CONFIG_AIO_PROCESS_MAX=32 # <large> 260options CONFIG_AIO_PROCESS_MAX=16 # <medium> 261options CONFIG_AIO_PROCESS_MAX=12 # <small> 262options CONFIG_AIO_PROCESS_MAX=8 # <xsmall> 263options CONFIG_AIO_PROCESS_MAX=4 # <bsmall> 264 265options CONFIG_AIO_THREAD_COUNT=16 # <xlarge> 266options CONFIG_AIO_THREAD_COUNT=8 # <large> 267options CONFIG_AIO_THREAD_COUNT=4 # <medium> 268options CONFIG_AIO_THREAD_COUNT=3 # <small> 269options CONFIG_AIO_THREAD_COUNT=2 # <xsmall,bsmall> 270 271options CONFIG_MAXVIFS=32 # <medium,large,xlarge> 272options CONFIG_MAXVIFS=16 # <small,xsmall> 273options CONFIG_MAXVIFS=2 # <bsmall> 274 275options CONFIG_MFCTBLSIZ=256 # <medium,large,xlarge> 276options CONFIG_MFCTBLSIZ=128 # <small,xsmall> 277options CONFIG_MFCTBLSIZ=16 # <bsmall> 278 279# 280# configurable kernel message buffer size 281# 282options CONFIG_MSG_BSIZE_REL=16384 # <msgb_small> 283options CONFIG_MSG_BSIZE_DEV=131072 # <msgb_small> 284options CONFIG_MSG_BSIZE_REL=131072 # <msgb_large> 285options CONFIG_MSG_BSIZE_DEV=131072 # <msgb_large> 286options CONFIG_MSG_BSIZE=CONFIG_MSG_BSIZE_REL # <!development,debug> 287options CONFIG_MSG_BSIZE=CONFIG_MSG_BSIZE_DEV # <development,debug> 288 289# 290# maximum size of the per-process Mach IPC table 291# 292options CONFIG_IPC_TABLE_ENTRIES_SIZE_MAX=3145728 # 3M == 131072 entries # <bsmall,small,xsmall> 293options CONFIG_IPC_TABLE_ENTRIES_SIZE_MAX=7340032 # 7M == 305834 entries # <medium,large,xlarge> 294options CONFIG_IPC_TABLE_REQUEST_SIZE_MAX=1048576 # 1M == 65536 requests # <bsmall,small,xsmall> 295options CONFIG_IPC_TABLE_REQUEST_SIZE_MAX=2097152 # 2M == 131072 requests # <medium,large,xlarge> 296 297# 298# maximum copyout size for IPC debugging tools 299# 300options CONFIG_IPC_KERNEL_MAP_SIZE=32 # 32M # <bsmall,small,xsmall> 301options CONFIG_IPC_KERNEL_MAP_SIZE=64 # 64M # <medium,large,xlarge> 302 303# 304# configurable kernel - use these options to strip strings from panic 305# and printf calls. 306# no_printf_str - saves around 45K of kernel footprint. 307# 308options CONFIG_NO_PRINTF_STRINGS # <no_printf_str> 309options CONFIG_NO_KPRINTF_STRINGS # <no_kprintf_str> 310 311# support vsprintf (deprecated in favor of vsnprintf) 312options CONFIG_VSPRINTF # <vsprintf> 313 314# 315# configurable kernel - general switch to say we are building for an 316# embedded device 317# 318options CONFIG_EMBEDDED # <config_embedded> 319 320 321# Compile XNU with PPL support. 322options CONFIG_PMAP_PPL # <config_pmap_ppl> 323 324options NOS_ARM_ASM # <nos_arm_asm> 325options NOS_ARM_PMAP # <nos_arm_pmap> 326 327# support dynamic signing of code 328# 329options CONFIG_DYNAMIC_CODE_SIGNING # <dynamic_codesigning> 330 331# enforce library validation on all processes. 332# 333options CONFIG_ENFORCE_LIBRARY_VALIDATION # <config_library_validation> 334 335# support loading a second static trust cache 336# 337options CONFIG_SECOND_STATIC_TRUST_CACHE # <second_static_trust_cache> 338 339# support supplemental signatures 340# 341options CONFIG_SUPPLEMENTAL_SIGNATURES # <config_supplemental_signatures> 342 343# 344# code decryption... used on embedded for app protection, DSMOS on desktop 345# 346options CONFIG_CODE_DECRYPTION # <config_code_decryption> 347 348# 349# User Content Protection, used on embedded 350# 351options CONFIG_PROTECT # <config_protect> 352 353#allow write-protection of key page 354options CONFIG_KEYPAGE_WP # <config_keypage_wp> 355 356# 357# allow vm_pageout_scan to dynamically adjust its priority based on priorities of waiters 358# 359options CONFIG_VPS_DYNAMIC_PRIO # <vps_dynamic_prio> 360 361# 362# enable per-process memory priority tracking 363# 364options CONFIG_MEMORYSTATUS # <memorystatus> 365 366options CONFIG_DEFERRED_RECLAIM # <config_deferred_reclaim> 367 368# 369# enable jetsam - used on embedded 370# 371options CONFIG_JETSAM # <jetsam> 372 373# 374# enable new wait queue implementation stats / debugging 375# 376options CONFIG_WAITQ_STATS # <config_waitq_stats> 377 378# 379# enable freezing of suspended processes - used on embedded 380# 381options CONFIG_FREEZE # <freeze> 382 383options CHECK_CS_VALIDATION_BITMAP # <config_cs_validation_bitmap> 384 385# 386# enable physical writes accounting 387# 388options CONFIG_PHYS_WRITE_ACCT # <phys_write_acct> 389 390# 391# enable detectiion of file cache thrashing - used on platforms with 392# dynamic VM compression enabled 393# 394options CONFIG_PHANTOM_CACHE # <phantom_cache> 395 396# 397# memory pressure event support 398# 399options VM_PRESSURE_EVENTS # <vm_pressure_events> 400 401options CONFIG_SECLUDED_MEMORY # <config_secluded_memory> 402 403# 404# Ledger features 405# 406options CONFIG_LEDGER_INTERVAL_MAX # <config_ledger_interval_max> 407 408# 409# I/O Scheduling 410# 411options CONFIG_IOSCHED # <config_iosched> 412 413# 414# Accounting for I/O usage 415# 416options CONFIG_IO_ACCOUNTING # <config_io_accounting> 417 418# 419# Enable inheritance of importance through specially marked mach ports and for file locks 420# For now debug is enabled wherever inheritance is 421# 422options IMPORTANCE_INHERITANCE # <importance_inheritance> 423options IMPORTANCE_TRACE # <importance_trace> 424options IMPORTANCE_DEBUG # <importance_debug> 425 426options CONFIG_TELEMETRY # <config_telemetry> 427 428options CONFIG_PROC_UUID_POLICY # <config_proc_uuid_policy> 429 430# 431# ECC data logging 432# 433options CONFIG_ECC_LOGGING # <config_ecc_logging> 434 435# 436# Application core dumps 437# 438options CONFIG_COREDUMP # <config_coredump> 439 440# 441# Vnode guards 442# 443options CONFIG_VNGUARD # <config_vnguard> 444 445# 446# Paravirtualization 447# 448options CONFIG_PV_TICKET # <config_pv_ticket> 449 450# 451# Enable extended VM address space and user heap segregation 452# 453options CONFIG_MAP_RANGES # <config_map_ranges> 454 455# 456# Ethernet (ARP) 457# 458pseudo-device ether # <networking,inet> 459# 460# Network loopback device 461# 462pseudo-device loop # <networking,inet> 463# 464# UCB pseudo terminal service 465# 466pseudo-device pty 512 init pty_init # <xlarge> 467pseudo-device pty 256 init pty_init # <large> 468pseudo-device pty 128 init pty_init # <medium> 469pseudo-device pty 48 init pty_init # <small> 470pseudo-device pty 16 init pty_init # <xsmall> 471pseudo-device pty 8 init pty_init # <bsmall> 472# 473# Cloning pseudo terminal service 474# 475pseudo-device ptmx 1 init ptmx_init 476 477# 478# memory device 479pseudo-device mdevdevice 1 init mdevinit 480 481# 482# 483# packet filter device 484# 485pseudo-device bpfilter 4 init bpf_init # <networking,inet> 486 487# 488# fsevents device 489pseudo-device fsevents 1 init fsevents_init # <config_fse> 490 491pseudo-device random 1 init random_init 492pseudo-device dtrace 1 init dtrace_init # <config_dtrace> 493pseudo-device helper 1 init helper_init # <config_dtrace> 494pseudo-device lockstat 1 init lockstat_init # <config_dtrace> 495pseudo-device lockprof 1 init lockprof_init # <config_dtrace> 496pseudo-device sdt 1 init sdt_init # <config_dtrace> 497pseudo-device systrace 1 init systrace_init # <config_dtrace> 498pseudo-device fbt 1 init fbt_init # <config_dtrace> 499pseudo-device profile_prvd 1 init profile_init # <config_dtrace> 500 501 502pseudo-device perfmon 1 init perfmon_dev_init # <config_perfmon> 503 504# 505# IOKit configuration options 506# 507 508options HIBERNATION # system hibernation # <hibernation> 509options IOKITCPP # C++ implementation # <iokitcpp> 510options IOKITSTATS # IOKit statistics # <iokitstats> 511options IOTRACKING # IOKit tracking # <iotracking> 512options CONFIG_SLEEP # # <config_sleep> 513options CONFIG_MAX_THREADS=500 # IOConfigThread threads 514options NO_KEXTD # <no_kextd> 515options NO_KERNEL_HID # <no_kernel_hid> 516 517# 518# Libkern configuration options 519# 520 521options LIBKERNCPP # C++ implementation # <libkerncpp> 522options CONFIG_BLOCKS # Blocks runtime # <config_blocks> 523options CONFIG_KXLD # kxld/runtime linking of kexts # <config_kxld> 524options CONFIG_KEC_FIPS # Kernel External Components for FIPS compliance (KEC_FIPS) # <config_kec_fips> 525 526# Note that when adding this config option to an architecture, one MUST 527# add the architecture to the preprocessor test at the beginning of 528# libkern/kmod/cplus_{start.c,stop.c}. 529options CONFIG_STATIC_CPPINIT # Static library initializes kext cpp runtime # <config_static_cppinit> 530 531# 532# libsa configuration options 533# 534 535# CONFIG_KEXT_BASEMENT - alloc post boot loaded kexts after prelinked kexts 536# 537options CONFIG_KEXT_BASEMENT # # <config_kext_basement> 538 539# 540# Persona Management 541# 542options CONFIG_PERSONAS # Persona management # <config_personas> 543options PERSONA_DEBUG # Persona debugging # <persona_debug> 544 545# 546# security configuration options 547# 548 549options CONFIG_MACF # Mandatory Access Control Framework # <config_macf> 550options CONFIG_MACF_SOCKET_SUBSET # MAC socket subest (no labels) # <config_macf> 551#options CONFIG_MACF_DEBUG # debug # <config_macf> 552 553options CONFIG_AUDIT # Kernel auditing # <config_audit> 554 555options CONFIG_ARCADE # Arcade validation support # <config_arcade> 556 557options CONFIG_SETUID # setuid/setgid support # <config_setuid> 558 559options CONFIG_SECURE_BSD_ROOT # secure BSD root # <config_secure_bsd_root> 560 561options CONFIG_KAS_INFO # kas_info support # <config_kas_info> 562 563options CONFIG_PROC_RESOURCE_LIMITS # Per process limits for resources like file descriptors and mach ports # <config_proc_resource_limits> 564 565# 566# MACH configuration options. 567# 568 569# 570# This defines configuration options that are normally used only during 571# kernel code development and debugging. They add run-time error checks or 572# statistics gathering, which will slow down the system 573# 574########################################################## 575# 576# MACH_ASSERT controls the assert() and ASSERT() macros, used to verify the 577# consistency of various algorithms in the kernel. The performance impact 578# of this option is significant. 579# 580options MACH_ASSERT # # <mach_assert> 581options MACH_VM_DEBUG # # <debug> 582options CONFIG_ZLEAKS # Live zone leak debugging # <zleaks> 583options CONFIG_VOUCHER_DEPRECATED # Enable deprecated voucher managers # <config_voucher_deprecated> 584 585# 586# CONFIG_DEBUGGER_FOR_ZONE_INFO restricts zone info so that it is only 587# available when the kernel is being debugged. 588# 589options CONFIG_DEBUGGER_FOR_ZONE_INFO # <debugger_for_zone_info> 590# 591# MACH_LDEBUG controls the internal consistency checks and 592# data gathering in the locking package. This also enables a debug-only 593# version of simple-locks on uniprocessor machines. The code size and 594# performance impact of this option is significant. 595# 596options MACH_LDEBUG # # <debug> 597 598# 599# configuration option for full, partial, or no kernel debug event tracing 600# 601options KDEBUG # kernel tracing # <kdebug> 602options IST_KDEBUG # limited tracing # <ist_kdebug> 603options NO_KDEBUG # no kernel tracing # <no_kdebug> 604 605# 606# CONFIG_DTRACE enables code needed to support DTrace. Currently this is 607# only used for delivery of traps/interrupts to DTrace. 608# 609options CONFIG_DTRACE # # <config_dtrace> 610 611options LOCK_STATS # # <lock_stats> 612 613# kernel performance tracing 614options KPERF # <kperf> 615options KPC # <kpc> 616 617 618options CONFIG_PERVASIVE_CPI # <config_pervasive_cpi> 619options CONFIG_PERVASIVE_ENERGY # <config_pervasive_energy> 620 621options CONFIG_IOTRACE # Physical IO tracing # <config_iotrace> 622 623# 624# CONFIG_PERFMON enables code to interface with performance monitoring hardware, 625# which count hardware events like cache misses and branch mispredicts. 626# 627options CONFIG_PERFMON # <config_perfmon> 628 629options PGO # <pgo> 630 631# DEVELOPMENT define for development builds 632options DEVELOPMENT # dev kernel # <development> 633 634# DEBUG kernel 635options DEBUG # general debugging code # <debug> 636options CONFIG_NONFATAL_ASSERTS # non fatal asserts # <softasserts> 637 638options MACH_BSD # BSD subsystem on top of Mach # <mach_bsd> 639options IOKIT # # <iokit> 640 641# 642# configurable kernel related resources (CONFIG_THREAD_MAX needs to stay in 643# sync with bsd/conf/MASTER until we fix the config system... todo XXX 644# 645options CONFIG_THREAD_MAX=2560 # <medium,large,xlarge> 646options CONFIG_THREAD_MAX=1536 # <small,xsmall> 647options CONFIG_THREAD_MAX=1024 # <bsmall> 648 649options CONFIG_TASK_MAX=1024 # <medium,large,xlarge> 650options CONFIG_TASK_MAX=768 # <small,> 651options CONFIG_TASK_MAX=512 # <xsmall,bsmall> 652 653# 654# Minimum zone map size: 115 MB 655# 656options CONFIG_ZONE_MAP_MIN=120586240 # <xsmall,bsmall,small,medium,large,xlarge> 657 658# vc_progress_white - make the progress gear white instead of black 659options CONFIG_VC_PROGRESS_WHITE # <vc_progress_white> 660 661# 662# Timeshare scheduler implementations 663# 664options CONFIG_SCHED_TRADITIONAL # <config_sched_traditional> 665options CONFIG_SCHED_PROTO # <config_sched_proto> 666options CONFIG_SCHED_GRRR # <config_sched_grrr> 667options CONFIG_SCHED_GRRR_CORE # <config_sched_grrr> 668options CONFIG_SCHED_MULTIQ # <config_sched_multiq> 669options CONFIG_SCHED_TIMESHARE_CORE # <config_sched_traditional,config_sched_multiq> 670options CONFIG_CLUTCH # <config_clutch> 671options CONFIG_SCHED_AUTO_JOIN # <config_sched_auto_join> 672options CONFIG_SCHED_RT_ALLOW # <config_sched_rt_allow> 673 674options CONFIG_SCHED_IDLE_IN_PLACE # <config_sched_idle_in_place> 675options CONFIG_SCHED_SFI # <config_sched_sfi> 676options CONFIG_PROB_GZALLOC # <pgzalloc> 677options CONFIG_SCHED_DEFERRED_AST # <config_sched_deferred_ast> 678 679options CONFIG_PREADOPT_TG # <config_preadopt_tg> 680options CONFIG_PREADOPT_TG_DEBUG # <config_preadopt_tg_debug> 681 682# Enable allocation of contiguous physical memory through vm_map_enter_cpm() 683options VM_CPM # <vm_cpm> 684 685# This is overridden by the board configuration's HAS_FAST_CNTVCT. 686options CONFIG_SKIP_PRECISE_USER_KERNEL_TIME # <config_skip_precise_user_kernel_time> 687 688# 689# Switch to disable cpu, wakeup and high memory watermark monitors 690# 691options CONFIG_NOMONITORS # <config_nomonitors> 692 693options MACH_KDP # KDP # <mach_kdp> 694options CONFIG_SERIAL_KDP # KDP over serial # <config_serial_kdp> 695options CONFIG_KDP_INTERACTIVE_DEBUGGING # <kdp_interactive_debugging> 696options CONFIG_KDP_COREDUMP_ENCRYPTION # Support for encrypting kernel coredumps # <config_kdp_coredump_encryption> 697 698options CONFIG_TASKWATCH 699options CONFIG_USER_NOTIFICATION # <config_user_notification> 700# 701# Kernel Power On Self Tests 702# 703options CONFIG_XNUPOST # <config_xnupost> 704 705# 706# Kernel proc reference instrumentation 707# 708options PROC_REF_DEBUG # <proc_ref_debug> 709 710# 711# Kernel Voucher Attr Manager for Activity Trace 712# 713options CONFIG_ATM # <config_atm> 714 715# Group related tasks together into coalitions 716options CONFIG_COALITIONS # <config_coalitions> 717 718# Enable support for sysdiagnose notifications 719options CONFIG_SYSDIAGNOSE # <config_sysdiagnose> 720 721# Configurable Security Restrictions 722options CONFIG_CSR # <config_csr> 723options CONFIG_CSR_FROM_DT # <config_csr_from_dt> 724 725# Enable collection of IO Compression statistics 726options CONFIG_IO_COMPRESSION_STATS # <config_io_compression_stats> 727 728# 729# Console options 730# 731options SERIAL_CONSOLE # bi-directional serial over UART 732options VIDEO_CONSOLE # uni-directional output over framebuffer 733 734# 735# Syscall options 736# 737options CONFIG_REQUIRES_U32_MUNGING # incoming U32 argument structures must be munged to match U64 # <config_requires_u32_munging> 738 739# 740# copyout() instrumentation 741# 742options COPYOUT_SHIM # Shim for copyout memory analysis via kext #<copyout_shim> 743 744# 745# Enable hardware correlation of mach absolute time 746# across intel/arm boundary 747options CONFIG_MACH_BRIDGE_SEND_TIME # # <config_mach_bridge_send_time> 748options CONFIG_MACH_BRIDGE_RECV_TIME # # <config_mach_bridge_recv_time> 749 750options CONFIG_QUIESCE_COUNTER # Support for _COMM_PAGE_CPU_QUIESCENT_COUNTER # <config_quiesce_counter> 751options CONFIG_ARM_PFZ # Support for PFZ on ARM # <config_arm_pfz> 752 753# 754# Sanitizers 755# 756options CONFIG_KASAN # <config_kasan> 757options CONFIG_UBSAN # <config_ubsan> 758 759options CONFIG_KCOV # <config_kcov> 760options CONFIG_KSANCOV # <config_ksancov> 761options CONFIG_STKSZ # <config_stksz> 762 763# dark boot support 764options CONFIG_DARKBOOT # <config_darkboot> 765 766# support for tracking service port labels for stackshots/debugging 767options CONFIG_SERVICE_PORT_INFO # <config_service_port_info> 768 769# support for processes delaying idle sleep for pending IO 770options CONFIG_DELAY_IDLE_SLEEP # <config_delay_idle_sleep> 771 772# support for storing a 64-bit user supplied value in the proc structure 773options CONFIG_PROC_UDATA_STORAGE # <config_proc_udata_storage> 774 775pseudo-device ksancov 1 init ksancov_init_dev # <config_ksancov> 776 777# Debug instrumentation for statistics and catching of code that 778# leaves interrupts masked or preemption disabled for an excessive 779# period of time. 780options SCHED_HYGIENE_DEBUG # <sched_hygiene_debug> 781 782# support for system call rejection/tracing 783options CONFIG_DEBUG_SYSCALL_REJECTION # <config_debug_syscall_rejection> 784